Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: GBQHUo/DLQb1r2AZQR/RgyJnZsPxUvmxM0jNWdfjtDE=
Subject key identifier: 97:6E:17:FD:BF:A2:DA:C3:02:8C:B5:FD:47:FB:77:90:4A:DC:71:5E
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 0194BC04DBC9EE6F8610AAF3B9B9992E7CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 11F0
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: x5NQbsL02WzJL6ilrdFmhIPrVSkZzWoANRXobPKVi2I=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:c9:ee:6f:86:10:aa:f3:b9:b9:99:2e:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=976e17fdbfa2dac3028cb5fd47fb77904adc715e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:95:b8:8a:b9:a9:dc:83:0e:cf:7f:ba:e6:
ab:f1:71:3c:02:bf:48:a5:c2:70:2e:c6:92:24:23:
55:5a:cf:af:02:3d:d3:04:f2:d8:05:53:1b:0e:e3:
4b:39:ff:4b:ac:9d:a6:eb:60:c4:98:25:2a:2b:78:
a4:73:04:6d:ba:d4:ef:67:4f:89:93:2e:ba:ea:bc:
41:71:87:1b:8e:95:2c:77:79:9f:8d:94:c0:08:7e:
76:1c:20:64:36:09:33:47:16:87:43:73:15:57:4b:
27:a7:20:40:5d:bf:a0:35:d5:ed:b6:68:bb:3e:41:
c0:f9:7b:68:90:79:71:68:0e:25:8d:a4:c2:9b:93:
00:da:8f:36:5d:44:3c:bb:e2:65:2e:1b:50:19:51:
73:23:3d:26:d3:13:e1:7d:af:5b:6b:f2:22:78:0b:
ff:3d:2f:35:af:45:fe:dc:ba:e2:15:68:cc:3c:71:
78:4b:59:30:ad:ec:38:96:ed:b7:f3:13:d3:c0:ca:
ce:9a:52:b7:b5:58:3e:58:54:b1:78:78:22:80:5e:
3b:e5:43:b2:07:56:b1:74:4d:f3:18:a9:67:a8:76:
cf:e6:01:aa:43:47:b9:3c:dc:f7:cc:e5:e2:9e:df:
a4:40:0c:f5:50:e6:c6:6f:78:88:37:38:a6:5e:ac:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6E:17:FD:BF:A2:DA:C3:02:8C:B5:FD:47:FB:77:90:4A:DC:71:5E
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8b:cf:b0:12:64:3d:0e:3a:78:51:9c:38:52:30:24:e2:7f:
c6:87:21:a4:05:c6:f6:a2:4e:1a:34:df:dc:7e:f6:d7:49:26:
4c:db:05:52:d5:96:83:6b:88:a7:6a:0e:31:af:7a:36:33:15:
b7:c8:a1:d1:5b:88:3e:2b:b6:32:2b:2d:8e:3f:58:79:9c:8c:
ae:67:30:9e:b4:40:fa:36:4e:e1:93:ad:cf:76:43:d5:66:97:
01:6d:c3:c1:50:e3:02:1a:40:74:32:89:b3:a0:52:2e:d8:a3:
ad:c4:32:4b:f8:11:12:dd:44:f0:c8:80:45:cf:14:6b:2e:49:
6d:9d:ea:47:b7:f2:e6:aa:d6:06:aa:a7:20:f9:b3:c7:77:84:
c3:25:18:f1:51:31:7c:8c:2e:3a:a9:40:98:fd:cb:85:d9:d6:
58:e6:66:9f:36:22:15:04:7d:72:69:b2:c5:b9:64:f3:f6:f3:
4e:1d:f3:b3:a4:ed:e1:9b:af:6a:22:4b:46:13:23:69:98:a5:
84:fc:b8:12:85:52:e4:a3:32:a0:2e:69:26:f2:5c:37:f3:e3:
44:3d:ae:49:98:4d:41:4c:eb:49:1d:5c:c6:6e:56:47:9d:86:
14:58:8f:dc:35:22:88:57:b3:70:c0:11:55:26:99:b0:45:d5:
9e:e2:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:20 2025 by rpki-client